Talk:BootNeuter - Revision history

J: /* Flashing the Boot Loader */ new section

2012-09-11T18:44:14Z

‎Flashing the Boot Loader: new section

MuscleNerd: /* Change bootloader? */

2008-09-19T23:52:41Z

‎Change bootloader?

Scotty2: /* Change bootloader? */

2008-09-19T22:47:05Z

‎Change bootloader?

Geohot at 13:54, 18 September 2008

2008-09-18T13:54:15Z

MuscleNerd: /* Change bootloader? */

2008-09-18T06:20:39Z

‎Change bootloader?

Dranfi at 04:25, 18 September 2008

2008-09-18T04:25:12Z

Cool name: /* Neuter Patch */ new section

2008-09-10T02:25:04Z

‎Neuter Patch: new section

MuscleNerd: /* Change bootloader? */

2008-09-09T10:30:17Z

‎Change bootloader?

MuscleNerd: /* Change bootloader? */

2008-09-09T10:29:31Z

‎Change bootloader?

MuscleNerd: /* Change bootloader? */

2008-09-09T10:28:08Z

‎Change bootloader?

← Older revision		Revision as of 18:44, 11 September 2012
Line 28:		Line 28:

	Use a nordumper. ~geohot		Use a nordumper. ~geohot
		+
		+	== Flashing the Boot Loader ==
		+
		+	How exactly does Boot Neuter flash the bootloader (3.9/4.6). I have a iPhone 2g that appears to have a broken/currupted BootLoader on it so BootNeuter wont run, it just hangs at Determing current settings. I can get SSH access to the device and would love to be able to manually flash the firmware to it and recover the device.
		+
		+	Thanks,
		+	J

← Older revision		Revision as of 23:52, 19 September 2008
Line 19:		Line 19:

	Muscle, I get it. the dev team figured out how to toggle the GPIO line, and figured out that it's connected to the WP line on the flash. 2 times in one page is sufficient to drill that into one's head. -Scotty2		Muscle, I get it. the dev team figured out how to toggle the GPIO line, and figured out that it's connected to the WP line on the flash. 2 times in one page is sufficient to drill that into one's head. -Scotty2
		+
		+	LOL you do realize I was responding to dranfi's second question? - MuscleNerd

	== Neuter Patch ==		== Neuter Patch ==

← Older revision		Revision as of 22:47, 19 September 2008
Line 17:		Line 17:

	That GPIO adds an extra layer of write protection for the bootloader blocks. Without deasserting WP# via that GPIO (using that particular address and data value), any attempt to erase or reprogram those blocks is ignored. It's one of the critical components in the software-based unlock, found by the dev team and shared with geohot. -- MuscleNerd		That GPIO adds an extra layer of write protection for the bootloader blocks. Without deasserting WP# via that GPIO (using that particular address and data value), any attempt to erase or reprogram those blocks is ignored. It's one of the critical components in the software-based unlock, found by the dev team and shared with geohot. -- MuscleNerd
		+
		+	Muscle, I get it. the dev team figured out how to toggle the GPIO line, and figured out that it's connected to the WP line on the flash. 2 times in one page is sufficient to drill that into one's head. -Scotty2

	== Neuter Patch ==		== Neuter Patch ==

← Older revision		Revision as of 13:54, 18 September 2008
Line 22:		Line 22:
	MuscleNerd--can you elaborate on what exactly the "neuter patch" is?		MuscleNerd--can you elaborate on what exactly the "neuter patch" is?
	I saw a post about this before BootNeuter actually being released, but I don't think I'll be able to find it. -- dranfi		I saw a post about this before BootNeuter actually being released, but I don't think I'll be able to find it. -- dranfi
		+
		+	Use a nordumper. ~geohot

@@ Line 15: / Line 15: @@
 Can you tell us more about the GPIO hack, I only see this in Gehot code : "//deassert WP#, thanks dev team
 	GPIO=0x700;"    -- dranfi
 == Neuter Patch ==

@@ Line 9: / Line 9: @@
 I suppose that BootNeuter use Gbootloader (see GeoHotz post : [http://iphonejtag.blogspot.com/2008/02/look-at-things-to-come.html] ) for changing the bootloader 4.6 stock/neutered.
 I suppose that BooNeuter use 112otb (see GeoHotz post : [http://iphonejtag.blogspot.com/2008/01/112-otb-unlocked.html] ) for changing a fakeblanked bootloader.
-But for the Bootloader 3.9, we don't know (maybe an upgrade to 4.6 first via bbupdater??) ?
+But for the Bootloader 3.9, we don't know (maybe an upgrade to 4.6 first via bbupdater??) ? -- dranfi
 BootNeuter does use geohot's extended secpack erase for erasing the 4.6 BL (as stated in its credits).  For actually changing the "locked-down" NOR status of both the 3.9 and 4.6 bootloaders, BootNeuter uses the GPIO hack found by the dev team (and credited to the dev team by geohot within gbootloader/main-bleraser.c.  Search that source code for the credit).  The neuter patch is actually another matter, and is another (still uncredited and unmentioned (until now)) dev team discovery.  And no, 3.9 is not upgraded to 4.6 before being neutered :) The 3.9 and 4.6 neuters are similar but distinct.-- MuscleNerd
 == Neuter Patch ==
 MuscleNerd--can you elaborate on what exactly the "neuter patch" is?

← Older revision		Revision as of 02:25, 10 September 2008
Line 12:		Line 12:

	BootNeuter does use geohot's extended secpack erase for erasing the 4.6 BL (as stated in its credits). For actually changing the "locked-down" NOR status of both the 3.9 and 4.6 bootloaders, BootNeuter uses the GPIO hack found by the dev team (and credited to the dev team by geohot within gbootloader/main-bleraser.c. Search that source code for the credit). The neuter patch is actually another matter, and is another (still uncredited and unmentioned (until now)) dev team discovery. And no, 3.9 is not upgraded to 4.6 before being neutered :) The 3.9 and 4.6 neuters are similar but distinct.-- MuscleNerd		BootNeuter does use geohot's extended secpack erase for erasing the 4.6 BL (as stated in its credits). For actually changing the "locked-down" NOR status of both the 3.9 and 4.6 bootloaders, BootNeuter uses the GPIO hack found by the dev team (and credited to the dev team by geohot within gbootloader/main-bleraser.c. Search that source code for the credit). The neuter patch is actually another matter, and is another (still uncredited and unmentioned (until now)) dev team discovery. And no, 3.9 is not upgraded to 4.6 before being neutered :) The 3.9 and 4.6 neuters are similar but distinct.-- MuscleNerd
		+
		+	== Neuter Patch ==
		+
		+	MuscleNerd--can you elaborate on what exactly the "neuter patch" is?

← Older revision		Revision as of 10:30, 9 September 2008
Line 11:		Line 11:
	But for the Bootloader 3.9, we don't know (maybe an upgrade to 4.6 first via bbupdater??) ?		But for the Bootloader 3.9, we don't know (maybe an upgrade to 4.6 first via bbupdater??) ?

−	BootNeuter does use geohot's extended secpack erase for erasing the 4.6 BL (as stated in its credits). For actually changing the "locked-down" NOR status of both the 3.9 and 4.6 bootloaders, BootNeuter uses the GPIO hack found by the dev team (and credited to the dev team by geohot within gbootloader/main-bleraser.c. Search that source code for the credit). The ~~actual~~ neuter patch is actually another matter, and is another (still uncredited and unmentioned (until now)) dev team discovery. And no, 3.9 is not upgraded to 4.6 before being neutered :) The 3.9 and 4.6 neuters are similar but distinct.-- MuscleNerd	+	BootNeuter does use geohot's extended secpack erase for erasing the 4.6 BL (as stated in its credits). For actually changing the "locked-down" NOR status of both the 3.9 and 4.6 bootloaders, BootNeuter uses the GPIO hack found by the dev team (and credited to the dev team by geohot within gbootloader/main-bleraser.c. Search that source code for the credit). The neuter patch is actually another matter, and is another (still uncredited and unmentioned (until now)) dev team discovery. And no, 3.9 is not upgraded to 4.6 before being neutered :) The 3.9 and 4.6 neuters are similar but distinct.-- MuscleNerd

← Older revision		Revision as of 10:29, 9 September 2008
Line 11:		Line 11:
	But for the Bootloader 3.9, we don't know (maybe an upgrade to 4.6 first via bbupdater??) ?		But for the Bootloader 3.9, we don't know (maybe an upgrade to 4.6 first via bbupdater??) ?

−	BootNeuter does use geohot's extended secpack erase for erasing the 4.6 BL (as stated in its credits). For actually changing the "locked-down" NOR status of both the 3.9 and 4.6 bootloaders, BootNeuter uses the GPIO hack found by the dev team (and credited to the dev team by geohot within gbootloader/main-bleraser.c. Search that source code for the credit). The actual neuter patch is actually another matter, and is another (still uncredited and unmentioned (until now)) dev team discovery. 3.9 is not upgraded to 4.6 before being neutered :) -- MuscleNerd	+	BootNeuter does use geohot's extended secpack erase for erasing the 4.6 BL (as stated in its credits). For actually changing the "locked-down" NOR status of both the 3.9 and 4.6 bootloaders, BootNeuter uses the GPIO hack found by the dev team (and credited to the dev team by geohot within gbootloader/main-bleraser.c. Search that source code for the credit). The actual neuter patch is actually another matter, and is another (still uncredited and unmentioned (until now)) dev team discovery. And no, 3.9 is not upgraded to 4.6 before being neutered :) The 3.9 and 4.6 neuters are similar but distinct.-- MuscleNerd

← Older revision		Revision as of 10:28, 9 September 2008
Line 11:		Line 11:
	But for the Bootloader 3.9, we don't know (maybe an upgrade to 4.6 first via bbupdater??) ?		But for the Bootloader 3.9, we don't know (maybe an upgrade to 4.6 first via bbupdater??) ?

−	BootNeuter does use geohot's extended secpack erase for erasing the 4.6 BL (as stated in its credits). For actually changing the "locked-down" NOR status of both the 3.9 and 4.6 bootloaders, BootNeuter uses the GPIO hack found by the dev team (and credited to the dev team by geohot within gbootloader. Search ~~his~~ source code for ~~that~~ credit). The actual neuter patch is actually another matter, and is another (still uncredited and unmentioned (until now)) dev team discovery. 3.9 is not upgraded to 4.6 before being neutered :) -- MuscleNerd	+	BootNeuter does use geohot's extended secpack erase for erasing the 4.6 BL (as stated in its credits). For actually changing the "locked-down" NOR status of both the 3.9 and 4.6 bootloaders, BootNeuter uses the GPIO hack found by the dev team (and credited to the dev team by geohot within gbootloader/main-bleraser.c. Search that source code for the credit). The actual neuter patch is actually another matter, and is another (still uncredited and unmentioned (until now)) dev team discovery. 3.9 is not upgraded to 4.6 before being neutered :) -- MuscleNerd